
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: UHTK1PCEXUWq7j4OJuzTWNnEurak78nMr8lZr0l/nRE=
Subject key identifier: D9:56:78:AB:00:4C:35:1D:44:57:92:5B:0B:67:09:BE:BF:B1:92:20
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019E615E6EBF574E64B2BA49B6FD90101603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 192A
Signing time: Mon 25 May 2026 23:00:39 +0000
Manifest this update: Mon 25 May 2026 23:00:39 +0000
Manifest next update: Tue 26 May 2026 23:00:39 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: it8EnUSsEePjcU6DhTBjSyESLFM8OhTWZiHVpLzxFqQ=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 21:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:61:5e:6e:bf:57:4e:64:b2:ba:49:b6:fd:90:10:16:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: May 25 23:00:39 2026 GMT
Not After : May 26 23:00:39 2026 GMT
Subject: CN=d95678ab004c351d4457925b0b6709bebfb19220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:87:67:3c:42:02:31:2a:47:24:81:f2:5d:
4c:da:ac:76:fd:c2:f3:0d:0c:68:ba:fd:65:9d:ed:
da:31:70:62:57:85:1b:bf:76:2e:de:ea:97:54:88:
e5:c4:fc:fa:e4:ca:65:ee:f0:ad:b2:55:52:ab:1d:
d9:b4:16:0b:0d:10:57:c9:c5:d8:9e:65:e1:78:29:
e2:15:9e:a5:73:6e:26:04:be:dd:da:78:59:92:8e:
41:09:4a:a6:bf:15:fe:7d:ea:6d:fd:c6:85:c4:f8:
ce:0c:a2:87:35:2a:13:94:2d:10:ab:e3:d9:41:47:
84:f9:76:21:97:c4:e1:6d:05:77:06:96:76:fc:d6:
2e:ab:81:a6:ca:7f:27:d5:af:64:15:3e:f1:64:c2:
6c:a8:d0:5b:94:e6:78:41:f1:d4:ee:16:67:7b:94:
3e:22:be:cf:f1:70:ef:03:69:41:bf:f7:5c:c8:45:
75:e2:2a:e2:ab:38:17:ce:e9:dd:00:67:a8:24:e8:
a9:6a:47:01:12:2f:3d:07:51:2e:b2:02:32:7f:ec:
2c:37:56:ab:7f:b8:f5:89:66:87:22:7e:51:00:b7:
70:dd:0a:03:c6:43:f6:d0:2f:5e:9d:8c:1f:d1:13:
30:b2:48:52:a4:c2:6d:74:e2:13:c5:55:8d:35:bf:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:78:AB:00:4C:35:1D:44:57:92:5B:0B:67:09:BE:BF:B1:92:20
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:04:cb:75:36:71:a3:44:f2:b6:d1:84:a0:eb:ea:13:f7:e1:
70:28:8c:c1:8e:dd:4f:0a:92:6d:e6:d1:d6:7b:f2:f5:0c:94:
35:9a:92:af:ab:7b:d9:b6:90:85:ae:1b:04:7a:65:ce:64:4e:
0f:54:89:1c:93:2e:39:e5:7d:ee:89:b4:aa:e0:e0:d6:73:ed:
1c:8f:69:ed:f3:49:f4:fc:71:75:d0:51:8b:6d:b2:9b:d3:6f:
cf:5e:2b:58:65:9e:67:8b:41:e9:c5:cc:91:87:c9:18:30:3f:
1d:a2:5e:07:b2:49:8c:4c:4c:df:65:ca:28:21:7a:50:6b:12:
04:b2:3e:b9:df:ba:c8:f1:25:c6:bf:9d:34:41:77:8f:90:85:
89:08:6f:2f:63:5e:54:a0:83:4a:a0:e4:27:65:1d:b4:a9:53:
6d:6e:11:ef:1c:3d:f0:8c:90:74:7e:31:e8:17:65:9f:3a:53:
e9:3c:fe:f8:aa:65:87:22:0b:df:b7:3c:f2:65:dc:67:4c:6c:
89:a0:e3:f2:3e:43:5b:8c:52:d7:9c:a7:09:25:ec:73:e5:62:
a7:94:4b:b9:e7:02:d0:cb:54:bf:2a:66:49:79:2e:8e:0f:f7:
73:05:86:fd:98:ce:2b:ea:79:9d:fe:f1:d0:2f:0c:c0:e2:48:
f4:32:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 04:50:37 2026 by rpki-client